Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa
File:                     3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa (raw, json)
Hash identifier:          SamllUipP83O/jAk2TIlw4zGe+empUu/pzpOZzuLOPA=
Subject key identifier:   91:C2:33:D9:26:1B:22:FA:E4:4B:A4:3F:20:E7:C3:9B:8C:59:15:E0
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       5EFA5443BF1B3038BA076CC3969EF1DABCCFBB30
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa
Signing time:             Thu 04 Apr 2024 11:26:04 +0000
ROA not before:           Thu 04 Apr 2024 11:21:04 +0000
ROA not after:            Thu 03 Apr 2025 11:26:04 +0000
asID:                     262792
IP address blocks:        201.76.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 23:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fa:54:43:bf:1b:30:38:ba:07:6c:c3:96:9e:f1:da:bc:cf:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Apr  4 11:21:04 2024 GMT
            Not After : Apr  3 11:26:04 2025 GMT
        Subject: CN=91C233D9261B22FAE44BA43F20E7C39B8C5915E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:3d:ea:ca:f0:c1:3b:8c:fb:de:98:9f:7f:
                    78:ad:92:80:af:5a:ec:f5:0a:84:d8:e9:11:e4:a0:
                    78:74:7c:93:99:aa:80:10:40:2c:88:4f:80:ca:f5:
                    3d:e0:3e:51:3c:8f:3b:39:a5:19:24:49:6f:79:9d:
                    00:10:d9:59:b4:9d:fd:92:ab:ab:d1:c0:ef:ba:1f:
                    c4:0a:ba:ef:41:93:74:77:be:c3:f1:eb:4e:60:4a:
                    84:65:85:df:b4:d1:a5:d2:90:fa:87:da:8c:1a:00:
                    71:52:48:11:55:ab:3e:e4:30:df:9e:4d:be:40:2a:
                    f7:00:54:af:5d:7e:55:12:89:c0:c1:4c:e5:bf:27:
                    7f:ba:e2:dd:ca:0e:47:88:0a:41:e6:d2:a7:cd:91:
                    bf:cc:3e:f7:54:b3:cc:b9:ac:1f:a3:4b:5f:f8:1d:
                    e1:2c:0c:40:0e:53:d5:b1:49:65:57:03:8d:32:1a:
                    f7:3b:0a:6f:98:29:cd:03:c7:59:36:80:fa:82:01:
                    89:0e:13:7c:aa:de:d9:7b:13:48:d5:65:b7:85:c2:
                    3e:da:2d:41:7a:d6:28:e8:80:ea:14:e1:a3:9c:3a:
                    71:07:29:6b:74:82:6a:25:22:2d:da:41:8a:f6:e3:
                    01:03:de:92:c1:9a:9a:65:a3:d1:c9:03:d2:55:e4:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C2:33:D9:26:1B:22:FA:E4:4B:A4:3F:20:E7:C3:9B:8C:59:15:E0
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:41:10:71:1b:40:d7:5d:53:a6:f8:43:95:0b:f8:31:fc:48:
         ad:dd:bd:94:f5:d8:f9:9a:2a:c6:ea:60:e8:72:62:f1:a5:2c:
         0b:98:21:82:ba:89:b1:a4:a1:b7:b0:c8:ec:89:20:22:08:3b:
         15:48:cd:aa:9f:50:2a:71:73:a3:c2:c4:41:8e:34:12:f5:fe:
         8b:de:a6:9f:fd:7d:6c:88:3c:73:5b:8c:f4:7c:8a:ac:d8:57:
         85:f7:b9:30:6b:84:d2:57:e0:53:0f:11:2c:2c:7b:0e:bd:13:
         f1:0d:73:d0:cc:26:2c:01:56:76:85:ff:71:a1:85:9b:81:50:
         e3:7e:d5:08:43:3a:c3:66:a0:29:e4:07:9f:25:a6:7a:2f:74:
         a9:0f:ca:61:04:bd:55:91:81:65:3e:a9:38:ca:ce:08:cc:f1:
         85:96:df:2b:3b:3d:ad:c6:37:2d:1b:69:11:65:79:dc:da:f6:
         8e:71:00:5f:82:62:34:81:43:3e:b6:19:28:c1:62:85:4e:c7:
         2b:c2:9a:01:a8:e7:0f:d7:97:35:84:db:7f:85:44:da:44:ea:
         49:12:a0:ad:ce:b1:0b:c9:42:96:a1:9f:d8:09:22:24:63:a2:
         eb:7a:31:1a:53:a3:4e:dc:40:bb:a5:7c:72:5b:6f:72:1d:c2:
         02:36:da:47
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXvpUQ78bMDi6B2zDlp7x2rzPuzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjA0QzIzNjQxRjUxMEFBQkE3RDdDQzk3N0FDQzZF
M0IwM0Y4MTAeFw0yNDA0MDQxMTIxMDRaFw0yNTA0MDMxMTI2MDRaMDMxMTAvBgNV
BAMTKDkxQzIzM0Q5MjYxQjIyRkFFNDRCQTQzRjIwRTdDMzlCOEM1OTE1RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkD3qyvDBO4z73piff3itkoCv
Wuz1CoTY6RHkoHh0fJOZqoAQQCyIT4DK9T3gPlE8jzs5pRkkSW95nQAQ2Vm0nf2S
q6vRwO+6H8QKuu9Bk3R3vsPx605gSoRlhd+00aXSkPqH2owaAHFSSBFVqz7kMN+e
Tb5AKvcAVK9dflUSicDBTOW/J3+64t3KDkeICkHm0qfNkb/MPvdUs8y5rB+jS1/4
HeEsDEAOU9WxSWVXA40yGvc7Cm+YKc0Dx1k2gPqCAYkOE3yq3tl7E0jVZbeFwj7a
LUF61ijogOoU4aOcOnEHKWt0gmolIi3aQYr24wED3pLBmpplo9HJA9JV5C/TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkcIz2SYbIvrkS6Q/IOfDm4xZFeAwHwYDVR0j
BBgwFoAU0M8EwjZB9RCqun18yXesxuOwP4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMS9EMENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0YwNEMyMzY0MUY1MTBB
QUJBN0Q3Q0M5NzdBQ0M2RTNCMDNGODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOWHF3c2ZEb1FxaW1td2dkbWFHc0RXNkJqelZCOGJ0ODN4cFE5RnpFdzlTLzEv
MzIzMDMxMmUzNzM2MmUzMTMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJTGwwDQYJKoZIhvcNAQELBQADggEBAIVBEHEb
QNddU6b4Q5UL+DH8SK3dvZT12PmaKsbqYOhyYvGlLAuYIYK6ibGkobewyOyJICII
OxVIzaqfUCpxc6PCxEGONBL1/ovepp/9fWyIPHNbjPR8iqzYV4X3uTBrhNJX4FMP
ESwsew69E/ENc9DMJiwBVnaF/3GhhZuBUON+1QhDOsNmoCnkB58lpnovdKkPymEE
vVWRgWU+qTjKzgjM8YWW3ys7Pa3GNy0baRFledza9o5xAF+CYjSBQz62GSjBYoVO
xyvCmgGo5w/XlzWE23+FRNpE6kkSoK3OsQvJQpahn9gJIiRjout6MRpTo07cQLul
fHJbb3IdwgI22kc=
-----END CERTIFICATE-----
Generated at Tue Oct 1 00:19:38 2024 by rpki-client on console-fra.rpki-client.org